Copilot instructions examples

django-componentsCopilot instructions

django-components

django-components/django-components/.github/copilot-instructions.md

letter. - Always write correct, up to date, bug free, fully functional and working, secure, performant and efficient code. - Focus on readability over being performant. - Fully implement all required functionality. - Leave

Microsoft AzureCopilot instructions

iotedge

Azure/iotedge/.github/copilot-instructions.md

AMQP, and HTTP protocols with message routing between modules and the cloud - **IoT Edge Security Daemon** (`edgelet/`) — Rust daemon (`aziot-edged`) providing workload and management APIs, module provisioning, and integration

MicrosoftCopilot instructions

ai-dev-gallery

microsoft/ai-dev-gallery/.github/copilot-instructions.md

WinUI 3, Windows App SDK, ONNX Runtime, WinML, .NET 9.0 ## PR Review Focus Areas ### Security - Check for hardcoded secrets, API keys, or credentials - Verify Limited Access Features (LAF) tokens

AzureADCopilot instructions

microsoft-authentication-library-for-dotnet

AzureAD/microsoft-authentication-library-for-dotnet/.github/copilot-instructions.md

issue - Do not comment on style, formatting, or indentation - Focus exclusively on: bugs, security issues, logic errors, API contract violations - If unsure whether something is a bug, do not comment

No other project uses it yet

pg-shardingCopilot instructions

spqr

pg-sharding/spqr/.github/copilot-instructions.md

tests.yaml**: Runs all test suites (unit, regress, feature) - **linters.yaml**: Runs code quality checks - **codeql.yml**: Security scanning ### Before Pushing 1. Format code: `make fmt` 2. Run linters: `make lint

OWASPCopilot instructions

wrongsecrets

OWASP/wrongsecrets/.github/copilot-instructions.md

intentionally vulnerable code** for educational purposes. When contributing, maintain this educational intent while following secure coding practices in the framework itself. ## Repository Structure ``` wrongsecrets/ ├── src/main/java/org/owasp/wrongsecrets/ │ ├── challenges/ # Challenge implementations │ │ ├── docker/ # Docker

No other project uses it yet

apacheCopilot instructions

iceberg-rust

apache/iceberg-rust/.github/copilot-instructions.md

praising the code unless it's exceptional. - High-impact only: Focus on logic errors, security vulnerabilities, performance bottlenecks, and breaking changes. - Skip the Obvious: Do not describe what the code

Gu1llaum-3Copilot instructions

sshm

Gu1llaum-3/sshm/.github/copilot-instructions.md

Centralized keymap + help. * Single source of truth for styles. * Small submodels and composition. --- ## 13) Security & Reliability * Validate all external inputs; sanitize strings rendered into the terminal. * Respect user locale

bitfoundationCopilot instructions

bitplatform

bitfoundation/bitplatform/.github/copilot-instructions.md

Implement Structured Logging**: Use structured logging for clear, queryable application logs. 6. **Adhere to Security Best Practices**: Implement robust authentication and authorization patterns. 7. **Use Async Programming**: Employ `async/await

tryzealotCopilot instructions

zealot

tryzealot/zealot/.github/copilot-instructions.md

both English and Chinese when adding new text - **Use Crowdin** for managing translations ## Security Considerations - **Never commit secrets** or sensitive data - **Use Rails credentials** for sensitive configuration - **Validate user input

sipyourdrink-ltdCopilot instructions

bernstein

sipyourdrink-ltd/bernstein/.github/copilot-instructions.md

spawning, identity, signals tasks/ # Lifecycle, store, claim, retry, models quality/ # Gates, testing, review, architecture security/ # Auth, RBAC, permissions, compliance observability/ # Metrics, tracing, logging, alerting protocols/ # MCP, A2A, ACP, gRPC, cluster

mozillaCopilot instructions

bedrock

mozilla/bedrock/.github/copilot-instructions.md

around I/O, network calls, and external services) * Race conditions, concurrency issues, or state inconsistencies * Security concerns (e.g., injection risks, unsafe deserialization, secrets handling). Heavily flag changes that add risks

No other project uses it yet

Capsize-GamesCopilot instructions

airunner

Capsize-Games/airunner/.github/copilot-instructions.md

template. - Treat any direct `*_ui.py` edit as invalid because `scripts/build_ui.py` will overwrite it. ## Security and Privacy Standards - Treat log hygiene as a product requirement, not a cleanup pass

ipa-labReads credentialsCopilot instructions

hackingBuddyGPT

ipa-lab/hackingBuddyGPT/.github/copilot-instructions.md

Instructions for hackingBuddyGPT ## Project Summary hackingBuddyGPT is a research-driven Python framework that helps security researchers and penetration testers use Large Language Models (LLMs) to automate and experiment with security

afreakyelfCopilot instructions

Pdf-Viewer

afreakyelf/Pdf-Viewer/.github/copilot-instructions.md

where applicable. - Respect system font scaling; test at 1.3×/2.0×. - Announce loading/progress/accessibility events appropriately. --- ## Security & File/URI Handling - Support `FLAG_SECURE` opt-in; don’t bypass if set. - Handle

wireappCopilot instructions

wire-webapp

wireapp/wire-webapp/.github/copilot-instructions.md

EVERY RESPONSE You MUST do ALL of these things in EVERY response: ### 1. 🔒 SECURITY CHECKS (BLOCKER - NEVER SKIP) - ✓ Validate ALL user inputs before use - ✓ Check API responses are validated with

integrationsCopilot instructions

terraform-provider-github

integrations/terraform-provider-github/.github/copilot-instructions.md

HIGH and MEDIUM findings - Report `HIGH`: correctness bugs, regressions, breaking schema/state changes without migration, security issues, secret leakage, panics, data loss risks. - Report `MEDIUM`: missing test coverage for changed behavior

lichtblick-suiteCopilot instructions

lichtblick

lichtblick-suite/lichtblick/.github/copilot-instructions.md

surrounding code - **No breaking changes**: Preserve existing APIs and interfaces unless explicitly asked - **Security first**: Never hardcode secrets, credentials, or sensitive data - **Open-source**: All contributions must be compliant with

AHEKOTCopilot instructions

ComfyUI_VNCCS_Utils

AHEKOT/ComfyUI_VNCCS_Utils/.github/copilot-instructions.md

there by design, but do not make a currently passing file depend on torch. ## Security rules `scripts/security_scan.py` scans all `.py/.js/.mjs/.json/.toml` (tests included) and CI fails on any finding. It forbids

layer5ioPipes a download into a shellCopilot instructions

layer5

layer5io/layer5/.github/copilot-instructions.md

issues - Check `eslint.config.js` for rule details - Common fixes: indentation (2 spaces), double quotes, semicolons ## Security Best Practices - Never commit secrets, API keys, or credentials - Use environment variables for sensitive configuration